Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: 1s6WiPkTcD4xQ4zsFqDl58NNZL4MaFuRjFTeXRMUQxw=
Subject key identifier: CE:F1:F8:F5:71:0D:1C:94:A1:87:63:3E:C3:F2:8D:4B:C6:1E:BC:5A
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019A4E4FFB196C1D985DED28840E0815251C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0D8A
Signing time: Tue 04 Nov 2025 10:00:55 +0000
Manifest this update: Tue 04 Nov 2025 10:00:55 +0000
Manifest next update: Wed 05 Nov 2025 10:00:55 +0000
Files and hashes: 1: C70AEWj9-6Xf_7hW0qDaaXjBqyk.roa (hash: ziTlH+AiYfgT0mW4yFLYq4aSfIpOpTQUFtDcSVqyF28=)
2: H4mX0idq9aa-2-behcELkDI1jEk.roa (hash: huYpiP8shZ1qtuKsgdaiOX3XPq9aXGUT/wJFL/doYxg=)
3: HOFuYJA21RRv709Gkqp-YVI1pnc.roa (hash: /Ilnzb7fkIj0wD4Gc1ajFjx70b+0n8vZYhfy5zJo85s=)
4: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: /IirqhgEi2wJ3hZhz2A+4HOQf56qd4pa8gxzlYv2yoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fb:19:6c:1d:98:5d:ed:28:84:0e:08:15:25:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Nov 4 10:00:55 2025 GMT
Not After : Nov 5 10:00:55 2025 GMT
Subject: CN=cef1f8f5710d1c94a187633ec3f28d4bc61ebc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:f7:97:af:58:00:2e:39:79:ca:1f:26:47:
92:a9:9b:40:eb:25:95:3d:39:d1:b8:f2:6f:3d:1f:
c6:57:b0:f8:02:89:fe:b9:a5:f6:03:1a:8d:9d:5a:
14:60:c3:a7:aa:f0:b8:f4:fc:2a:74:b4:50:80:b1:
8f:5a:55:4b:2b:7a:35:b3:26:f4:be:a9:48:85:29:
2a:d1:e8:fb:ac:71:5e:4e:50:11:06:65:45:50:58:
f4:90:9c:51:db:87:1f:dd:e1:d2:38:dc:42:5f:3e:
a4:3a:a0:99:0d:78:4a:74:74:db:79:ea:b9:f9:fd:
cd:d4:52:37:88:26:5d:87:62:02:4c:d3:2d:f9:d1:
a7:03:05:18:c9:fe:36:07:39:0c:ae:2f:5d:b9:88:
62:c9:4d:39:3a:41:6f:59:a5:95:d6:5f:68:80:9e:
b2:cb:47:aa:02:da:ad:fb:a7:9e:38:d5:b7:3f:29:
39:de:bc:10:0a:d0:83:c1:73:86:4b:f5:77:5f:30:
e9:b3:11:59:62:36:26:9f:55:c2:15:62:88:f7:25:
5d:78:cd:dd:4e:6d:52:43:9b:eb:d2:32:c6:15:4e:
06:86:42:5a:78:5d:78:fd:e7:0f:d1:d2:0d:b6:56:
89:61:8a:60:13:47:c0:72:f2:58:c4:b6:1d:4c:fe:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F1:F8:F5:71:0D:1C:94:A1:87:63:3E:C3:F2:8D:4B:C6:1E:BC:5A
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:97:60:eb:a7:c1:0c:06:e1:1b:79:f6:3a:56:e8:83:4b:0e:
29:35:35:2e:3b:83:29:7e:cf:cc:e9:bd:34:bd:61:58:4c:0f:
25:7b:cc:53:55:4b:94:b2:f7:fc:ad:8f:54:83:60:b4:02:64:
77:45:ae:f7:19:3c:8c:61:22:5f:2d:6b:d0:3f:2d:60:d2:b7:
6f:94:17:a7:13:b8:4c:e5:ef:59:72:c3:97:4d:41:36:9e:a9:
19:79:59:e0:72:34:62:45:7c:66:58:86:ce:1c:ea:70:b3:7a:
c4:ac:5c:3f:ca:fd:8b:26:c2:b1:68:ec:1d:a0:03:33:0e:86:
32:d6:9c:f6:dd:07:c1:89:2b:db:b9:7a:4a:ac:6e:5a:3d:1c:
2a:80:c1:37:12:dc:ac:19:72:f6:27:db:62:24:66:7b:ae:76:
9f:e3:8b:8d:4c:56:f8:fb:c8:1c:a1:23:61:f1:c7:09:d0:fc:
62:7a:15:49:88:e1:42:72:26:f1:71:47:cb:72:e4:7b:09:9c:
99:1b:88:6f:7f:51:bf:df:5d:87:a0:7c:8d:bb:fe:33:c1:35:
a1:55:a0:9e:43:19:6c:26:70:78:03:13:c7:04:2b:d9:4a:fc:
80:eb:65:5e:93:8f:7b:86:a6:0b:2a:67:b6:24:51:e5:43:66:
95:cb:78:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/sZbB2YXe0ohA4IFSUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz
MzhmZmUwHhcNMjUxMTA0MTAwMDU1WhcNMjUxMTA1MTAwMDU1WjAzMTEwLwYDVQQD
EyhjZWYxZjhmNTcxMGQxYzk0YTE4NzYzM2VjM2YyOGQ0YmM2MWViYzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpP3l69YAC45ecofJkeSqZtA6yWV
PTnRuPJvPR/GV7D4Aon+uaX2AxqNnVoUYMOnqvC49PwqdLRQgLGPWlVLK3o1syb0
vqlIhSkq0ej7rHFeTlARBmVFUFj0kJxR24cf3eHSONxCXz6kOqCZDXhKdHTbeeq5
+f3N1FI3iCZdh2ICTNMt+dGnAwUYyf42BzkMri9duYhiyU05OkFvWaWV1l9ogJ6y
y0eqAtqt+6eeONW3Pyk53rwQCtCDwXOGS/V3XzDpsxFZYjYmn1XCFWKI9yVdeM3d
Tm1SQ5vr0jLGFU4GhkJaeF14/ecP0dINtlaJYYpgE0fAcvJYxLYdTP4oUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7x+PVxDRyUoYdjPsPyjUvGHrxaMB8GA1UdIwQY
MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt
Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm
LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJdg66fB
DAbhG3n2Olbog0sOKTU1LjuDKX7PzOm9NL1hWEwPJXvMU1VLlLL3/K2PVINgtAJk
d0Wu9xk8jGEiXy1r0D8tYNK3b5QXpxO4TOXvWXLDl01BNp6pGXlZ4HI0YkV8ZliG
zhzqcLN6xKxcP8r9iybCsWjsHaADMw6GMtac9t0HwYkr27l6SqxuWj0cKoDBNxLc
rBly9ifbYiRme652n+OLjUxW+PvIHKEjYfHHCdD8YnoVSYjhQnIm8XFHy3Lkewmc
mRuIb39Rv99dh6B8jbv+M8E1oVWgnkMZbCZweAMTxwQr2Ur8gOtlXpOPe4amCypn
tiRR5UNmlct4ag==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:37 2025 by rpki-client